Darn it.. another BSoD

[MrGenie]

so im off with my rdbss.sys issue!!!
things cleared up after i removed the anti virus (weird eh!)

any ways the system was ok for three days so i decided to install a newer version on Mcaffee (as its needed for our vpn and its given for free by my work)

so.... every once in a while i find my computer freezing or suddenly blue-screens!

the detail on the blue screen doesnt reference any driver in particular but it says IO manager was verifying a driver and some sort of violation happened thus the BSoD.


i have collected the the dump and the msreports .... any one wants to take a shot at looking into those?

thanks.

 

[MrGenie]

this is soooo weird!!!
so my computer has the symptoms shown above.. i really dont know when its going to crash!!!
but today something happened that drove me NUTS!
so im downloading a file via bittorrents a while before my pc blue-screened! the total dl was at 27% and it was at 17% when i booted my pc before the last BSoD "reported above"
so when i got the 2nd BSoD and the system rebooted ..."i forced it during the BSoD... didnt wait for a complete memory dump" and when my BT started, the file returned to its 17% status!!!! how could i have lost my partial d/l?????

 

[dclive]

OK, so you turned on driver verifier (smart!) and it found a problem. Let's look at the dumps and find the problem. Send me the dumps and your mpsreports computername.cab output file, all zipped up, and we'll look.

You might also just jump to my web page and analyze the dumpfiles yourself (too) if you want...

 

[MrGenie]

hmmm me analyzing the file!!
ill give it a shot.. but i have also sent you the files...

 

[dclive]

When you analyzed it, what was the problem? If you follow my guide, it will clearly tell you, with no room for misintepretation. Did you try?

Hint: Starts with an S..... 🙂

So, explode the yourcomputername.cab file, find the *devices.txt file, open it, search for that filename, and bingo, that tells you who made the problematic file and all kinds of other information. Easy, eh?

 

[MrGenie]

ok...
so i started to debug the file .. following your instruction...
i found these three error lines:
*** ERROR: Module load completed but symbols could not be loaded for SSIDRV.SYS
*** ERROR: Module load completed but symbols could not be loaded for SSFS0BB8.SYS
*** ERROR: Symbol file could not be found. Defaulted to export symbols for mfehidk.sys -
Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2cf5 )

clearly the last line tells me about a file SSF*SYS


when i opened the Goliath_DOSDevices i found it referring to:
no reference to that drive in the file
so.. i looked up contents of files searching for that string SSFS0BB8.SYS and found it in GOLIATH_DRIVERS

Module[175] [C:\WINDOWS\SYSTEM32\DRIVERS\SSFS0BB8.SYS]
Company Name: Webroot Software Inc (www.webroot.com)
File Description: Spy Sweeper FileSystem Filter Driver
Product Version: (3.5:6.56)
File Version: (3.5:6.56)
File Size (bytes): 20280
File Date: Thu Jul 19 22:42:36 2007
Module TimeDateStamp = 0x46a03c6b - Fri Jul 20 07:39:07 2007
Module Checksum = 0x000063d7
Module SizeOfImage = 0x00009000
Module Pointer to PDB = [c:\sscore~1.7_r\products\spyswe~1\core\ss55~1.7_r\sdk\source\engine\sys\fmfilter\fre\i386\SSFSFD.pdb]
Module PDB Guid = {DC5B0041-E7AD-433D-A2C5-18B6976490BC}
Module PDB Age = 0x1

GUESS WHAT.... that was true.. the moment i removed webroot spysweeper... things went fine.. i had my PC up for over than a day.. with no problems.. so far.. i hope when i get back from work . i wouldnt get the freeze ups "that lead to BSoD" any more.. 🙂

thanks dude...

 

[MrGenie]

but can someone explain to me what happened to my Torrent download? "first reply"

 

[Cutthroat]

Originally posted by: MrGenie
but can someone explain to me what happened to my Torrent download? "first reply"

Torrent apps use a cache to store partial pieces until it gets enough to write the part to disk. And they also use a hash to check for file corruption. It could be either cached data that was not yet written to disk or bad pieces found and needed to be re-downloaded, or both.

 

[MrGenie]

sounds good enough for me..
thanks.

 

[dclive]

Originally posted by: MrGenie
ok...
so i started to debug the file .. following your instruction...
i found these three error lines:
*** ERROR: Module load completed but symbols could not be loaded for SSIDRV.SYS
*** ERROR: Module load completed but symbols could not be loaded for SSFS0BB8.SYS
*** ERROR: Symbol file could not be found. Defaulted to export symbols for mfehidk.sys -
Probably caused by : SSFS0BB8.SYS ( SSFS0BB8+2cf5 )

clearly the last line tells me about a file SSF*SYS


when i opened the Goliath_DOSDevices i found it referring to:
no reference to that drive in the file
so.. i looked up contents of files searching for that string SSFS0BB8.SYS and found it in GOLIATH_DRIVERS

Module[175] [C:\WINDOWS\SYSTEM32\DRIVERS\SSFS0BB8.SYS]
Company Name: Webroot Software Inc (www.webroot.com)
File Description: Spy Sweeper FileSystem Filter Driver
Product Version: (3.5:6.56)
File Version: (3.5:6.56)
File Size (bytes): 20280
File Date: Thu Jul 19 22:42:36 2007
Module TimeDateStamp = 0x46a03c6b - Fri Jul 20 07:39:07 2007
Module Checksum = 0x000063d7
Module SizeOfImage = 0x00009000
Module Pointer to PDB = [c:\sscore~1.7_r\products\spyswe~1\core\ss55~1.7_r\sdk\source\engine\sys\fmfilter\fre\i386\SSFSFD.pdb]
Module PDB Guid = {DC5B0041-E7AD-433D-A2C5-18B6976490BC}
Module PDB Age = 0x1

GUESS WHAT.... that was true.. the moment i removed webroot spysweeper... things went fine.. i had my PC up for over than a day.. with no problems.. so far.. i hope when i get back from work . i wouldnt get the freeze ups "that lead to BSoD" any more.. 🙂

thanks dude...

Great job!

So now whenever anyone gets a BSOD, you know exactly how to help them -- that's exactly what to do.

 

[dclive]

So - it's been a day and a half - is everything still stable?